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Top Stories 

• Arkansas State Troopers arrested a suspect known as the “Loan Ranger Bandit” July land 
charged him with 11 counts of robbery in connection with the robbery of banks in Texas, 
Arkansas, and Mississippi. - KETK 56 Jacksonville (See item 8) 

• Crews expected to clear the scene of a trail derailment by July 3 after a Norfolk Southern 
train allegedly crashed into the back of another July 2 in Sewickley, Pennsylvania, causing 
three trains to derail and two individuals to be injured. - KDKA 2 Pittsburgh (See item 15) 

• Two juveniles were arrested and charged June 25 for their alleged involvement in a 
shooting spree that damaged over 40 businesses, vehicles, and residences throughout 
Neshoba County, Mississippi, between June 19 and 20. - Neshoba Democrat (See item 37) 

• Residents in low-lying areas along the Iowa River in Johnson County, Iowa, received 
mandatory evacuation notices July 2 due to rising water from the Coralville Lake Reservoir 
threatening to crest over the dam’s spillway and flood the area. - Iowa City Press -Citizen; 
Associated Press (See item 41) 
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Energy Sector 



1. July 2, Salt Lake City Deseret News - (Utah) Green River oil spill visually clean, but 
monitoring continues. The U.S. Bureau of Land Management reported July 2 that it 
could take up to 2 years before they issue a complete all-clear to the site of a May 21 
oil well leak that reached the Green River in Salt Lake City after officials issued a 
preliminary all-clear in June. The bureau reported that it will continue monitoring the 
site and is awaiting a response from the well’s operator, SW Energy, after issuing a 
violation notice. 

Source: http://www.deseretnews.com/article/865606248/Green-River-oil-spill-visually- 
clean-but-monitoring-continues.html 

For another story, see item 41 
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Chemical Industry Sector 

2. July 3, WBOY 12 Clarksburg - (West Virginia) Corrosive chemical leak closes 1-79 
welcome center in Monongalia County. Corrosive materials, including potassium 
chloride, leaked from the trailer of a semi-truck parked at the West Virginia Welcome 
Center on 1-79 in Monongalia County for about 12 hours July 2. The welcome center 
was closed for several hours while crews contained the spill and cleaned the scene. 
Source: http://www.wbov.com/storv/25926632/corrosive-chemical-leak-closes-i-79- 
welcome-center-in-monongalia-county 

3. July 2, Associated Press - (Louisiana) Westlake Chemical fire probe closed. A 
Louisiana Department of Environmental Quality representative stated July 1 that the 
agency’s investigation of a June fire at Westlake Chemical Corp.’s vinyl facility in 
Ascension Parish was closed, and company officials reported that air releases from the 
blaze did not exceed pollution limits. No injuries were reported and air monitoring did 
not reveal any off-site impacts. 

Source: http://www.islandpacket.com/2014/07/02/3193210/state-closes-probe-into- 
westlake.html?sp=/99/257/260/ 

4. July 2, KFGO 790 AM Fargo - (North Dakota) Chemical spill closes highway in 
Richland County. HAZMAT crews responded to the scene of a liquid nitrogen spill on 
Highway 13 near Wyndmere after a plastic tank filled with the chemical detached from 
a semi-truck travelling on the roadway. Traffic was diverted for over 1 hour while 
crews cleared the scene. 

Source: http://kfgo.com/news/articles/2014/iul/02/chemical-spill-closes-highway-in- 
richland-county/ 

[ Return to top ] 
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Nuclear Reactors, Materials, and Waste Sector 



Nothing to report 
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Critical Manufacturing Sector 

5. July 3, Chicago Tribune - (National) Subaru recalling 660,238 vehicles in U.S. due 
to brake line rust. Subaru announced July 3 that it is recalling 660,238 model year 
2005-2014 Forester, Impreza, Legacy, and Outback vehicles registered in cold-weather 
U.S. States due to the potential for brake lines to corrode and leak brake fluid, reducing 
the effectiveness of the vehicles’ brakes. 

Source: http://www.chicagotribune.com/business/breaking/chi-subaru-recalling- 
660238-vehicles-in-us-due-to-brake-line-rust-20140703,0,757181.story 

6. July 2, U.S. Department of Labor - (Connecticut) TLD Ace Corp. cited for exposing 
workers to fall, fire and electrical hazards. The Occupational Safety and Health 
Administration cited aircraft parts and auxiliary equipment manufacturer TLD Ace 
Corp. for 17 serious safety violations following an inspection at its Windsor facility. 
Proposed fines totaled $85,146. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=26304 

7. July 2, U.S. Consumer Product Safety Commission - (National) All Power America 
recalls snow throwers due to fire hazard. All Power America announced a recall of 
around 10,000 single stage snow throwers due to corroded carburetor needles which 
could leak and pose a fire hazard. 

Source: http://www.cpsc.gov/en/Recalls/2014/All-Power-America-Recalls-Snow- 
Throwers/ 

T Return to top i 



Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

8. July 2, KETK 56 Jacksonville - (Arkansas; Texas; Mississippi) Loan Ranger Bandit 
arrested during traffic stop. Arkansas State Troopers arrested a suspect known as the 
“Loan Ranger Bandit” during a traffic stop July 1. The man was charged with 1 1 
counts of robbery and other charges for his alleged robbery of banks in Texas, 
Arkansas, and Mississippi between 2009 and 2014. 
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Source: http://www.ketknbc.com/news/crimewatch/loan-ranger-bandit-arrested 



9. July 2, Agoura Hills Patch - (California) FBI nabs suspected “Hypnotist Bandit”. A 
suspect kn own as the “Hypnotist Bandit” was arrested by FBI agents following a bank 
robbery in Ventura June 30. Authorities believe the man is responsible for several 
additional bank robberies in Los Angeles County during May and June. 

Source: http://agourahills.patch.com/ groups/police-and-fire/p/hypnotist-bandits- 
biggest-mistake-pulling-a-bank-heist-in-same-building-with-fbi-office 

10. July 2, Associated Press - (New York; California) Ex-NY policeman pleads guilty to 
company theft. A former New York police officer who was also the former vice 
president of Fidelity National Title Group pleaded guilty July 2 to stealing roughly 
$469,000 from the company and spending it on gambling. In 2009 the suspect arranged 
for a vendor to send the money to a bank account he controlled and used the funds for 
personal use. 

Source: http://www.utsandiego.com/news/2014/Jul/02/ex-ny-policeman-pleads-guilty- 
to-company-theft/ 

11. July 2, Securityweek - (International) New Android malware targets banking apps, 
phone information: FireEye. FireEye researchers identified a piece of Android 
malware kn own as HijackRAT that disguises itself as a ‘Google Service Framework’ 
and is capable of disabling antivirus applications, stealing banking credentials and 
personal information, and remotely accessing infected devices. The malware is 
currently targeting banks in Korea but can be easily modified to target others. 

Source: http://www.securitvweek.com/new-android-malware-targets-banking-apps- 
phone-information-fireeye 

12. July 2, U.S. Securities and Exchange Commission - (Minnesota) Court imposes 
officer and director bar, injunction and monetary sanctions against Minneapolis 
attorney based on fraud verdict. The U.S. Securities and Exchange Commission 
announced July 2 that a judge imposed sanctions against a Minneapolis attorney, 
Capital Solutions Monthly Income Fund, and Transactional Finance Fund Management 
(TFFM) for allegedly engaging in securities fraud by issuing false and misleading 
statements to investors and fraudulently issuing a series of unregistered offerings of 
interest. The attorney was barred from serving as an officer or director of a publicly 
traded company for 10 years, and sanctions totaling $19.7 million were levied against 
the attorney, the fund, and TFFM. 

Source: http://www.sec.gov/litigation/litreleases/2014/lr23036.htm 

13. June 30, Southern California City News Service - (California) San Diego CPA 
convicted in elaborate tax evasion scheme. A San Diego certified public accountant 
was convicted June 30 for running an identity theft and tax evasion scheme where he 
used the identities of deceased individuals to open bank accounts and then transferred 
funds to those accounts in order to hide his income from the Internal Revenue Service. 
The man failed to report $5 million in income and owed the IRS $1.6 million. 

Source: http://www.cbs8.com/story/25910774/san-diego-cpa-convicted-in-elaborate- 
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tax-evasion-scheme 
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Transportation Systems Sector 

14. July 2, WUSA 9 Washington, D.C. - (Virginia) Serious 2 car accident closes lanes on 
GW Pkwy. Both northbound and southbound lanes of the George Washington 
Memorial Parkway in Virginia were shut down for several hours July 2 due to a two- 
vehicle car accident. Authorities opened one southbound lane after 4 hours. 

Source: http://www.wusa9.com/storv/news/local/dc/2014/07/02/serious-2-car-accident- 
closes-lanes-gw-pkwy/121 10173/ 

15. July 2, KDKA 2 Pittsburgh - (Pennsylvania) Emergency crews called to Sewickley 
train derailment & fire. Crews expected to clear the scene of a trail derailment by 
July 3 after a Norfolk Southern train allegedly crashed into the back of another July 2 
in Sewickley, causing three trains to derail and two individuals to be transported to an 
area hospital with injuries. Train service was halted while authorities investigated the 
incident. 

Source: http://pittsburgh.cbslocal.com/2014/07/02/emergencv-crews-called-to- 
sewickley-train-fire/ 

16. July 2, WTVF 5 Nashville - (Tennessee) FedEx plane diverted to Nashville after 
reports of smoke in cockpit. A FedEx airplane headed to Manchester, New 
Hampshire, July 2 was diverted to Nashville International Airport after taking-off from 
Memphis when smoke was discovered in the cockpit. Officials are investigating the 
cause of the smoke and no injuries were reported. 

Source: http://www.newschannel5.com/story/25923143/fedex-plane-makes- 
emergency-landing-at-nashville-airport 

For another story, see item 41 
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Food and Agriculture Sector 

17. July 2, WRBC 3 Chattanooga - (Tennessee) Man electrocuted during grain transfer. 
A Koch Foods employee was killed at a farm in McMinn County July 2 when he 
attempted to blow feed grain from a semi-truck into a feed silo and the truck’s boom 
came in contact with power lines, caught fire, and electrocuted the worker. 

Source: http://www.wrcbtv.com/story/25926408/man-electrocuted-during-grain- 
transfer 

18. July 2, Durango Herald - (Colorado) Drought disaster for S.W. Colorado. The U.S. 
Department of Agriculture issued disaster designations for 10 counties in Colorado due 
to severe drought conditions that have caused producers’ crops and livestock in the area 
to suffer and created financial losses. Affected producers are eligible for financial 
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assistance, including emergency loans, from the Farm Service Agency. 

Source: http://www.durangoherald.com/article/20140702/NEWS01/140709909/- 
l/durangolivingspring201 1/Drought-disaster-declared-in-SW-Colo- 

19. July 1, U.S. Food and Drug Administration - (National) Oriya Organics, LLC 

voluntarily recalls Oriya Organics Superfood Protein Medley containing sprouted 
chia seed powder for possible Salmonella contamination. Oriya Organics, LLC 
voluntarily issued a recall for its Superfood Protein Medley, which contains organic 
sprouted chia seed powder, due to possible Salmonella contamination. The products 
were packaged in 21.2-ounce containers and sold to customers in several States and 
retailers in Texas and Louisiana. 

Source: http://www.fda.gov/Safety/Recalls/ucm403695.htm 
Lor another story, see item 29 
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Water and Wastewater Systems Sector 

20. July 2, KCRA 3 Sacramento - (California) Water main break affects hundreds in 
Auburn. A 12-inch pipe failed in Placer County July 2 causing hundreds of residents in 
the Auburn area to lose water service. Officials stated that the pipe should be repaired 
and service restored by June 3. 

Source: http://www.kcra.com/news/local-news/news-sierTa/water-main-break-affects- 
hundreds-in-auburn-area/26774606 

21. July 2, Delaware State News - (Delaware) Federal funds aid Kent Wastewater 
Treatment Plant. Lederal, State, and county officials announced July 2 that the Kent 
County Regional Wastewater Treatment Plant in Milford will receive $7.5 million 
worth of improvements to their facilities, which will include replacing blowers and 
installing a power backup system. 

Source: http://delaware.newszap.com/centraldelaware/133273-70/federal-funds-aid- 
kent-wastewater-treatment-plant 

Lor another story, see item 1 
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Healthcare and Public Health Sector 

Nothing to report 
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Government Facilities Sector 



22. July 3, Associated Press - (California) California wildfire grows, makes runs 
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overnight. Fire crews reached 30 percent containment of the 3,800-acre Butts Fire in 
Pope Valley July 3 that caused the evacuation of about 200 homes. Two homes and 
seven other structures were damaged while hundreds of others remained threatened in 
Napa Valley. 

Source: http://news.msn.com/us/california-wildfire-threatens-wine-countrv-homes 

23. July 2, Waterloo-Cedar Falls Courier - (Iowa) Floods close campgrounds, parks for 
July Fourth weekend. Several campgrounds in Black Hawk County and throughout 
Iowa were closed the week of June 30 due to flooding caused by a storm. Crews 
worked to clean up and clear downed trees and other damage. 

Source: http://wcfcourier.com/news/local/floods-close-campgrounds-parks-for-iulv- 
fourth-weekend/article 0bb2d56d-7109-5ee6-b557-b5320cb32alf.html 



24. July 2, WLNS 6 Lansing - (Michigan) Two in custody after bomb threat at Spartan 
Stadium. Police arrested two suspects in connection to a bomb threat that prompted the 
evacuation of Michigan State University’s Spartan Stadium in East Lansing July 2 for 
about 2 hours. No bomb was found after authorities searched the stadium. 

Source: http://www.wlns.com/storv/25928395/threat-prompts-evacuation-of-spartan- 
stadium 



25. July 2, KTXL 40 Sacramento - (California) 4 students test positive for active TB. 
Sacramento County health officials reported that four more students tested positive for 
active tuberculosis after testing at Grant Union High School began in February when a 
student initially tested positive for the infection, bringing the total number of cases to 
120 . 

Source: http://fox40.com/2014/07/02/4-students-test-positive-for-active-tb/ 

26. July 2, KFOR 4 Oklahoma City - (Oklahoma) School bus crash in Norman sends 15 
children to hospital. Fifteen children and an adult were transported to an area hospital 
with injuries after a school bus transporting children to summer camp and a car struck 
head-on in Norman July 2. 

Source: http://kfor.com/2014/07/02/school-bus-crash-in-norman-and-sends-a-dozen- 
children-to-hospital/ 

27. July 2, U.S. Environmental Protection Agency - (Alaska) Fort Wainwright reduces 
water contamination risk from fuel tanks in EPA settlement. The U.S. Army 
entered into a settlement with the U.S. Environmental Protection Agency July 2 after 
inspections at Fort Wainwright Garrison in Alaska found that from at least 2012 to 
2013 Fort Wainwright failed to perform leak detection tests, monitor underground 
storage tanks regularly, and investigate releases as required by law. The U.S. Army 
agreed to improve management of its fuel storage tanks and comply with federal law 
designed to protect groundwater and pay a penalty of $158,700. 

Source: 

http://vosemite.epa.gOv/opa/admpress.nsf/0/E777DB2D8820EECC85257D090071EF3 

0 
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For another story, see item 2 
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Emergency Services Sector 

28. July 2, WXIX 19 Cincinnati - (Ohio) Escaped inmate faked identity to get out of jail. 
Authorities are searching for an inmate who escaped from the Hamilton County Justice 
Center in Cincinnati July 1 by reportedly using the identity of another inmate. Five 
different individuals reviewed the inmate’s false paperwork prior to his release. 

Source: http://www.foxl9.com/storv/25921357/inmate-escapes-hamilton-countv- 
iustice-center-sheriffs-office-said-inmate-is-considered-dangerous 

29. July 1, MLive.com - (Michigan) Maggots found near food in Jackson prison 
'unacceptable,' says Michigan Governor. Michigan officials are investigating a food 
poisoning outbreak that sickened 30 prisoners at Pamall Correctional Facility in 
Jackson as of June 29, days after maggots were found near a food service line. A 
performance review was issued for Aramark Correctional Services, a private food 
service provider that was contracted by the State in December 2013. 

Source: http://www.mlive.com/lansing- 
news/index.ssf/2014/07/prison food safety unacceptabl.html 
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Information Technology Sector 

30. July 3, Securityweek - (International) Enhanced KIVARS malware now attacks 64- 
bit systems. Researchers with Trend Micro analyzed a new version of the KIVARS 
malware that is capable of targeting systems running 64-bit operating systems. The 
malware is distributed using the TROJ_FAKEWORD.A dropper and is capable of 
several data-stealing and remote actions. 

Source: http://www.securityweek.com/enhanced-kivars-malware-now-attacks-64-bit- 
systems 

31. July 3, The Register - (International) Oh SNAP! Old-school ’80s Unix hack to smack 
OSX, iOS, Red Hat? Researchers with DefenseCode released a white paper outlining 
how Unix-based systems could be vulnerable to hijacking via a class of vulnerabilities 
involving ‘wildcard’ characters in filenames. The vulnerability could allow attackers to 
inject arbitrary arguments to shell commands run by other users. 

Source: 

http://www.theregister.co.uk/2014/07/03/unix wildcard vuln lets hackers modify sh 
ell scripts/ 

32. July 3, Softpedia - (International) Ruby on Rails receives security fixes. Updates for 
the Ruby on Rails Web application framework were released that include fixes for two 
vulnerabilities that affected PostgreSQL. 

Source: http://news.softpedia.com/news/Rubv-on-Rails-Receives-Security-Fixes- 
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449322.shtml 



33. July 2, The Register - (International) Running Cisco’s VoIP manager? Four words 
you don’t want to hear: ‘Backdoor SSH root key’. Cisco warned users of its Unified 
Communications installations that a vulnerability exists in its Unified Communications 
Domain Manager (Unified CDM) software that can allow an unauthenticated attacker 
to gain root access by exploiting a default SSH key designed for use by Cisco support 
representatives. The vulnerability is present in all versions of Cisco Unified CDM prior 
to version 4.4.2 and users were advised to update the software, or to filter SSH access 
as a stopgap measure. 

Source: 

http://www.theregister.co.uk/2014/07/02/cisco you cant just leave your ssh keys ly 
ing around/ 

For another story, see item 11 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

Nothing to report 
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Commercial Facilities Sector 

34. July 3, KULR 8 Billings - (Montana) Suspect identified in Sports Authority fire. 
Police identified a person of interest believed to be connected to a July 1 fire that 
caused $500,000 in damage at a Sports Authority store in Billings when the front 
exterior of the building caught fire due to lit fireworks. The store was evacuated and no 
injuries were reported. 

Source: http://www.kulr8.com/storv/25930596/sports-authority-fire 

35. July 3, KYW 3 Philadelphia - (New Jersey) Fire damages Voorhees apartment 
complex; lightning eyed as possible cause. Officials believe a lightning strike may 
have sparked a July 2 fire that damaged 17 units at The Club at Main Street apartment 
complex in Voorhees, New Jersey. At least 14 residents were displaced by the fire. 
Source: http://philadelphia.cbslocal.com/2014/07/03/fire-damages-camden-countv- 
apartment-complex/ 
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36. July 2, WNBC 4 New York City - (New Jersey) Man who started Jersey Shore hotel 
fire had opiates in system: Officials. Ocean County officials released July 1 its final 
report on a March 2013 fire at the Mariner’s Cover Motor Inn in Point Pleasant, stating 
that the cause was accidental and the motel was in full compliance with all codes. Four 
people were killed and eight others injured by the fire that ignited when a resident 
under the influence of opiates discarded his cigarette in a stuffed chair at the motel. 
Source: http://www.nbcnewvork.com/news/local/Jersey-Shore-Fire-Mariners-Cove- 
Point-Pleasant-New-Jersey-265559 1 8 1 .html 



37. July 2, Neshoba Democrat - { Mississippi) Two charged in shooting spree. Two 
juveniles were arrested and charged June 25 for their alleged involvement in a shooting 
spree that damaged over 40 businesses, vehicles, and residences throughout Neshoba 
County between June 19 and 20. No injuries were reported in connection with the 
shootings. 

Source: 

http://neshobademocrat.com/main.asp?SectionID=2&SubSectionID=297&ArticleID=3 

2974 



38. July 2, WMNN 14 Lake City - (Michigan) Cadillac Walmart evacuated for over 4 
hours following bomb threat. Hundreds of patrons and employees were evacuated 
from a Walmart store in Cadillac July 2 due to a reported bomb threat. Michigan State 
Police searched and cleared the scene over 4 hours later after no explosive devices were 
found. 

Source: http://www.minews26.com/content/?p=32226 

39. July 2, KHBS 40 Fort Smith - (Arkansas) Workers allowed back into Walmart after 
bomb threat. Employees were evacuated from a Walmart store in Fayetteville July 2 
due to a bomb threat that was written on a wall inside a bathroom. Police searched and 
cleared the store about 2 hours later after they collected evidence. 

Source: http://www.4029tv.com/news/walmart-bomb-threat/26757878 

40. July 2, U.S. Department of Labor - (Massachusetts) OSHA fines Dollar Tree Stores 
$177,800 for exposing employees to serious safety hazards at Massachusetts store. 
The Occupational Safety and Health Administration cited Dollar Tree Stores for 3 
willful and 1 serious workplace safety violation following a December 2013 inspection 
at the company’s store in the Roslindale neighborhood of Boston. Proposed penalties 
total $177,800. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=26307 
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Dams Sector 



41. July 3, Iowa City Press-Citizen; Associated Press - (Iowa) Iowa City braces for 
flooding as reservoir water rises. Residents in low-lying areas along the Iowa River 
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in Johnson County received mandatory evacuation notices July 2 due to rising water 
from the Coralville Lake Reservoir threatening to crest over the dam’s spillway and 
flood the area. Natural gas and electricity will be shut off to several areas in the county 
and all beaches, campgrounds, and waterways were closed or placed under a ban. 
Source: httD://www.desmoinesregister.com/storv/news/2014/07/02/iowa-citv-braces- 
floodin 2 / 1212053 9/ 
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